OpenStack Neutron vulnerabilities

3 published CVEs name OpenStack Neutron among the affected products.

Critical 0High 1Medium 1Low 1Not scored 0

Newest CVEs

CVE-2026-55707
In OpenStack Neutron before 28.0.2, the subnetpool onboarding API does not verify ownership of the target subnets. An authenticated user can onboard subnets…
OpenStack · Neutron
High7.1
CVE-2026-50266
In OpenStack Neutron before 28.0.1, a project manager can create or update a port on a shared network owned by another project and set device_owner to a value…
OpenStack · Neutron
Low2.2
CVE-2026-49299
In OpenStack Neutron before 28.0.1, the tagging controller enforces plural policy action names on single-tag write operations while the defined policy rules…
OpenStack · Neutron
Medium5.3